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1$.  A9STRA'  T 


The  Analysis  of  Data  Base  Security  and  Access  Limitation  Requirements  for  the  post-1975 
Automated  TACC  Complex  was  conducted  to  provide  the  United  States  Air  Force  and  other 
military  agencies  with  detailed  information  concerning  (a)  current  and  completed  studies  which 
have  addressed  the  security  and  access  limitation  problems  and  methods  of  implementation  for 
automated  information  systems;  (b)  the  determination  of  a  TACC  data  base  baseline;  and  (c) 
the  identification  of  the  users  of  TACC  data  and  their  access  requirements  to  classified  portions 
of  the  TACC  data  base.  The  data  developed  were  to  be  used  both  in  the  development  of 
incremental  growth  capabilities  in  the  TACC  and  in  the  design  of  future  automation  of  the  TACSP 
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LEGAL  NOTICE 

When  U.S.  Government  drawings,  specifications  or  other  data  are  used  for  any 
purpose  other  than  a  definitely  related  government  procurement  operation,  the 
government  thereby  incurs  no  responsibility  nor  any  obligation  whatsoever;  and 
the  fact  that  the  government  may  have  formulated,  furnished,  or  in  any  way  sup¬ 
plied  the  said  drawings,  specifications,  or  other  data  is  not  to  be  regarded  by 
implication  or  otherwise  as  in  any  manner  licensing  the  holder  or  any  other  person 
or  conveying  any  rights  or  permission  to  manufacture,  use,  or  sell  any  patented 
invention  that  may  in  any  way  be  related  thereto. 


OTHER  NOTICES 


Do  nor  return  this  copy.  Retain  or  destroy. 


1.0  INTRODUCTION 


The  Analysis  of  Data  Base  Security  and  Access  Limitation  Require¬ 
ments  for  the  post-1973  Automated  TACC  Complex  was  conducted  to  provide 
the  United  States  Air  Force  and  other  military  agencies  with  detailed 
information  concerning  (a)  current  and  completed  studies  which  have 
addressed  the  security  and  access  limitatioh  problems  and  methods  of 
implementation  for  automated  information  systems;  (b)  the  determina¬ 
tion  of  a  TACC  data  base  baseline;  and  (c)  the  identification  of  the 
users  of  TACC  data  and  their  access  requirements  to  classified  portions 
of  the  TACC  data  base.  The  data  developed  were  to  be  rsed  both  in  the 
development  of  incremental  growth  capabilities  in  the  TACC  and  in  the 
design  of  future  automation  of  the  TACS. 

Data  for  user  information  collected  during  interviews  with  personnel 
at  Hqtrs.  TAC,  Shaw  AFB,  S.C.*  and  PACAF  was  refined  and  assimilated 
with  the  data  obtained  through  document  research  and  reproduced  in  the 
form  of  a  user  catalog  (CDRL  Item  A-005).  As  stated  in  the  user  catalog, 
the  user  characteristics  of  access  rates,  for  both  average  and  peak 
activity  periods,  and  response  time  requirements  were  not  available 
and  thus  could  not  be  obtained,  except  for  a  very  few  files,  during 
the  data  collection  phase  of  the  study.  Only  sufficient  data  was 
collected  to  enable  the  meaningful  analysis  of  the  user's  nature  of 
access  of  each  file,  the  total  number  of  users  with  need  to  access 
classified  data  identified  by  file  and  the  total  number  of  users 
accessing  each  file  identified  by  file.  This  analysis  satisfies  only 
those  products  of  analysis  listed  in  the  "Tasks  2  and  3  Problem  Definition 
Document,  CDRL  Item  A-002"  numbered  11  and  12,  plus  a  part  of  number  7. 
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product  of  analysis  11  is  a  matrix  (Tabls  3.2)  showing  the  total  number 
of  users  with  need  to  access  classified  data  identified  by  file  or  file 
item.  Product  of  analysis  12  ie  a  matrix  (Table  3.1)  showing  the  total 
number  of  users  accessing  unclassified  filet;  or  file  items  which,  when 
combined  with  Table  3*2,  will  show  the  total  number  of  users  accessing 
each  file  identified  by  file  or  file  item.  The  portions  of  the  product  of 
analysis  7  which  are  included  in  each  entry  in  the  columns  of  Tables  3*1 
and  3*2  are  indications  for  (a)  the  nature  of  access  by  each  user  to 
each  of  the  files  or  file  items  and  (b)  the  volume  for  each  access  of 
each  fils  or  portion  of  a  file. 

2.0  ANALYSIS  TECHNIQUES 

The  analysis  procedures  were  set  up  to  enable  the  analyst  to 
(a)  determine  which  characteristics  and  parameters  of  the  data  base 
are  relevant  for  the  selection  of  security  techniques,  (b)  retrieve 
the  applicable  data  from  the  previously  tabulated  date  or  prepare 
special  listings  as  necessary,  (c)  perform  the  analysis  to  determine 
the  relative  effects  on  system  parameters  caused  by  the  various  rele¬ 
vant  techniques  for  the  protection  of  classified  data. 

In  order  to  realize  the  products  of  the  analysis  task  (stated  in 
Section  1.0),  the  information  contained  in  the  Data  Collection  Forms, 

Sheet  4,  was  transposed  to  the  format  for  entry  into  the  User  Catalog 
(CDRL  Item  A-005).  The  data  contained  in  the  User  Catalog  was  then 
entered  into  the  matrix  shown  in  Tables  3.1  and  3.2  in  Section  3.0. 

This  matrix  satisfies  ths  total  requirements  of  products  of  analysis 
11  and  12,  and  ths  part  of  7  which  can  be  provided  with  the  limited 
data  collected.  Conclusions  drawn  from  this  matrix  are  also  listed 
in  Section  3.0. 
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3.0  USER  NATURE  OP  ACCESS  ANALYSIS 

Tables  3.1  and  3.2  contain  matrixes  showing  the  files  in  the 
current  TACC  data  base  grouped  by  security  classification  on  the 
vertical  axis  and  the  users  on  the  horizontal  axis.  User  accesses 
to  the  data  base  are  indicated  to  the  right  of  the  file,  record  or 
item  by  symbols  designating  type  or  nature  of  access.  Accesses  to  the 
data  base  are  of  three  types: 

E  m  Entry 
U  *  Update 
I  -  Information 

"Entry"  means  that  the  user  provides  the  data.  Each  Entry 
consists  of  data  which  will  add  a  new  record  or  replace  an  existing 
record.  Volume  for  each  Entry  is  the  total  for  that  record. 

"Update"  means  that  the  user  is  responsible  for  changing  the  data 
within  a  record.  Each  Update  will  change  the  data  in  one  or  more 
item(s)  of  a  record.  Volume  for  each  Update  will  be  the  total 
characters  of  either  an  item  or  record. 

"Information"  means  that  the  user  retrieves  data  for  Information 
as  required  in  the  accomplishment  of  his  assigned  operational  function. 
Each  Information  access  will  only  be  one  record  or  item.  Volume  for 
each  Information  access  will  be  the  characters  for  a  record  or  item. 

Only  in  special  cases  when  a  file  is  a  document(s)  will  the  entire 
file  be  aocessed  on  one  access. 

For  purposes  of  these  analyses,  it  was  assumed  that  any  user 
updating  or  entering  data  will  also  correct  the  date;  therefore,  correc¬ 
tion  is  not  indicated  as  a  separate  access. 

Ratior.ale:  The  present  structure  of  the  files,  in  most  cases 
cases  precludes  a  user  from  retrieving  one  item  of  data.  In  the  manual 


TACC  data  base  files,  the  records  are  composed  of  interrelated  items. 
Also,  a  record  may  contain  all  the  items  on  one  sheet  of  paper. 
Therefore,  in  moat  cases,  since  the  information  is  contained  in  the 
file  in  the  same  format  as  it  came  into  the  system,  primarily  messages, 
it  is  physically  impossible  to  retrieve  only  one  item  of  information. 

In  an  automated  system  the  files  probably  would  be  structured  so  that 
individual  items  of  information  could  be  accessed  without  disturbing 
the  remainder.  Also  the  information  is  available  for  simultaneous 
use  without  additional  copies  being  made  of  the  original  data. 

Internal  users  of  the  TACC  data  base  are  those  functional  groups 
or  duty  positions  included  in  the  current  TACC  sections  of  Current 
Operations,  Current  Plans,  Weather,  and  ALCC  (even  though  ohe  ALCC 
may  be  physically  located  remote  from  the  rest  of  the  TACC).  External 
users  are  all  other  users.  External  users  may  be  located  in  other 
TACS  elements,  such  as  the  DASC,  CRC,  and  ALCE,  in  interface  elements 
such  as  the  Joint  Force,  Array  Forces  Component  (ARFOK),  and  in  tactical 
airbase  (TAB)  elements,  such  as  combat  wings,  the  Combat  Support  Group 
(CSG)  and  airborne  aircraft. 

The  following  conclusions  or  factors  which  may  be  of  value  to 
designers  of  the  Automated  TACC  are  drawn  from  Tables  3.1  and  J.2: 

1.  There  are  only  48  of  the  2J5  files  which  are  not  accessed 
by  external  users. 

2.  Two  internal  usei.i  access  the  TACC  data  base  for  information 
only. 

3.  Twenty  external  users  access  the  TACC  data  base  for  information 
only. 

4.  Twenty-Nine  external  .iaera  access  the  TACC  data  base  only  to 


enter  data  into  it. 


5.  External  users  enter  data  into  155  of  the  235  files. 

6.  Of  the  110  external  users,  68  enter  data  into  the  TACC  data 

base. 

4.0  RECOMMENDATIONS  FOR  ADDITIONAL  STUDY 

4.1  Acoess  Hate.  Peak  Periods  and  Response  Time  Study 

Since  data  could  not  be  collected  concerning  TACC  data  base  under 
access  rates  during  both  average  and  peak  activity  periods  and  user 
response  tine  requirements,  a  study  is  recoranended  to  develop  this  data 
which  is  much  needed  for  SEEK  FLEX  design  purposes.  Hughes  recommends 
that  an  activity  model  be  developed  baaed  on  the  force  model  documented 
in  the  Tabulation  Reports,  CDRL  Items  A-003  and  A-005,  which  could  be 
used  to  realistically  estimate  users'  access  and  response  time  require¬ 
ments.  Access  and  response  time  requirements  data  thus  developed  would 
be  compatible  with  the  type  of  operation  which  the  modelled  forces  ara 
capable  of  executing. 

4.2  Alphanume^^  i*»«play  versus  Graphic  Display  Trade-Off  Study 

The  results  of  the  Data  Base  Security  Study  indicate  that  a  con¬ 
siderable  amount  of  the  data  base  is  textual,  tabular  or  mixed  data. 

In  order  for  the  data  base  to  properly  interface  with  the  user,  the 
display  of  this  data  base  to  the  user  must  be  properly  organized  for 
effective  use.  Consideration  of  the  use  of  graphic  data  based  upon  the 
pictorial  data  already  used  at  the  TACC  could  perhaps  reduce  the  number 
of  alphanumeric  type  displays  and  enhance  the  direction  of  tactical 
operations.  The  cost  of  alphanumeric  displays  is  considerably  smaller 
than  the  cost  of  graphic  displays.  A  study  is  reeorrmended  based  upon 
the  common  data  base  study  proposed  in  A-004,  Section  11,  to  determine 


the  user  positions  and  the  alphanumeric  displays  required  for  each  of 
these  positions.  A  trace-off  study  of  the  graphic  display  capability 
at  each  of  these  positions  warranting  such  facilities  versus  the  alpha¬ 
numeric  display  at  each  user  position  to  determine  if  a  graphic  display 
capability  in  terms  of  cost  and  effectiveness  in  addition  to  alpha¬ 
numeric  displays  is  a  suitable  addition  to  the  automated  TA£C  of  the 


post-73  time  frame 
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g\  s  EXTERNAL  USER 
g  \  m  (Cont) 


56  SHP  COMMAND  &  AOMIN 


60-DASC  MSN  MONIT/DIR 


lUBil 


69- JSARC  COORD 


/O-AICE  MED  E VAC  SUP 


71-ALCE  INFLIGHT  MED  EVAC 


72-AEROMEOEVACOFF 


73-CASUAL  STAG  FACIL 


74-AERIAL  PORT  (AP) 


IEBL 


77 -TAC  AIRLIFT  LIA  OFF 


lEHUWa 


80-AIRCRAFT 


FTR  WING  TUOC 


83  AIRLIFT  WG  COMM  &  STAFF 


86  SOF  WG  Tl'OC 


87  BOMBER  WG  TUOC 


93  SPCOPSSOD  MATERIAL 

94  TANKER  SOO'OET  TUOC 
9T  SAR  SQD  TUOC 


96  ABERU  TUOC 
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I  ED 
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